Which mechanism should be used to write an IPS rule that focuses on the client or server
side of a TCP communication?
A.
The detection engine evaluates all sides of a TCP communication regardless of the rule
options.
B.
specification of the source and destination ports in the rule header
C.
the directional operator in the rule header
D.
the “flow” rule option